@benjistokman @mhoye I don't even think they should have the "paste a private key" option they have now. They choices should be:
1. "Generate a private key. This is trusting our javascript running in your browser to do so securely and not to send it to us or any other party."
2. "Generate your own private key and paste the public key here. The configuration file generated will be incomplete since you have not shared your private key. You will need to edit it to insert your private key into the provided place."